Every CVE Search/ Get API key

CVE-2021-3501

A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the...

7.1 HighFix available

A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
High
Availability
High

Exploit likelihood

0.38%Down 0.2 points since May 7, 2021
90%50%10%1%

What each source reports

NVD Score used 7.1

A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.

Record
CVE-2021-3501
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS 2.0
3.6 LowAV:L/AC:L/Au:N/C:N/I:P/A:P
Weakness
CWE-787
Updated
2026-11-02
CVE List No score

A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.

Record
CVE-2021-3501
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2021-26821 No score

A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.

Record
EUVD-2021-26821
Updated
2026-11-02
GitHub AdvisoriesGHSA-hvwc-6fg8-r6p5 7.1

A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the...

A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.

Record
GHSA-hvwc-6fg8-r6p5
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVAZL-6569 7.1

CVE-2021-3501 affecting package kernel for versions less than 5.10.78.1-1

A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.

Record
AZL-6569
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSV 7.1

A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.

Record
CVE-2021-3501
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
Show 9 moreShow less
OSVDEBIAN-CVE-2021-3501 7.1

A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.

Record
DEBIAN-CVE-2021-3501
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:2165 7.8

Red Hat Security Advisory: kpatch-patch security update

Record
RHSA-2021:2165
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:2168 7.8

Red Hat Security Advisory: kernel security and bug fix update

Record
RHSA-2021:2168
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:2169 7.8

Red Hat Security Advisory: kernel-rt security and bug fix update

Record
RHSA-2021:2169
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:2522 9.8

Red Hat Security Advisory: Red Hat Virtualization Host security update [ovirt-4.4.6]

Record
RHSA-2021:2522
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2021:2168 7.8

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: userspace applications can misuse the KVM API to cause a write of 16 bytes at an offset up to 32 GB from vcpu->run (CVE-2021-3501)

  • kernel: nitro_enclaves stale file descriptors on failed usercopy (CVE-2021-3543)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • OVS mistakenly using local IP as tun_dst for VXLAN packets (?) (BZ#1944667)

  • Selinux: The task calling security_set_bools() deadlocks with itself when it later calls selinux_audit_rule_match(). (BZ#1945123)

  • [mlx5] tc flower mpls match options does not work (BZ#1952061)

  • mlx5: missing patches for ct.rel (BZ#1952062)

  • CT HWOL: with OVN/OVS, intermittently, load balancer hairpin TCP packets get dropped for seconds in a row (BZ#1952065)

  • [Lenovo 8.3 bug] Blackscreen after clicking on "Settings" icon from top-right corner. (BZ#1952900)

  • Rocky Linux 8.x missing uio upstream fix. (BZ#1952952)

  • Turbostat doesn't show any measured data on AMD Milan (BZ#1952987)

  • P620 no sound from front headset jack (BZ#1954545)

  • Rocky Linux kernel 8.2 and higher are affected by data corruption bug in raid1 arrays using bitmaps. (BZ#1955188)

  • [net/sched] connection failed with DNAT + SNAT by tc action ct (BZ#1956458)

Record
RLSA-2021:2168
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-3501 7.1

A flaw was found in the Linux kernel in versions before 5.12. The value of internal.ndata, in the KVM API, is mapped to an array index, which can be updated by a user process at anytime which could lead to an out-of-bounds write. The highest threat from this vulnerability is to data integrity and system availability.

Record
UBUNTU-CVE-2021-3501
CVSS 3.1
7.1 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVALSA-2021:2168 No score

Important: kernel security and bug fix update

The kernel packages contain the Linux kernel, the core of any Linux operating system.

Security Fix(es):

  • kernel: userspace applications can misuse the KVM API to cause a write of 16 bytes at an offset up to 32 GB from vcpu->run (CVE-2021-3501)

  • kernel: nitro_enclaves stale file descriptors on failed usercopy (CVE-2021-3543)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • OVS mistakenly using local IP as tun_dst for VXLAN packets (?) (BZ#1944667)

  • Selinux: The task calling security_set_bools() deadlocks with itself when it later calls selinux_audit_rule_match(). (BZ#1945123)

  • [mlx5] tc flower mpls match options does not work (BZ#1952061)

  • mlx5: missing patches for ct.rel (BZ#1952062)

  • CT HWOL: with OVN/OVS, intermittently, load balancer hairpin TCP packets get dropped for seconds in a row (BZ#1952065)

  • [Lenovo 8.3 bug] Blackscreen after clicking on "Settings" icon from top-right corner. (BZ#1952900)

  • AlmaLinux 8.x missing uio upstream fix. (BZ#1952952)

  • Turbostat doesn't show any measured data on AMD Milan (BZ#1952987)

  • P620 no sound from front headset jack (BZ#1954545)

  • AlmaLinux kernel 8.2 and higher are affected by data corruption bug in raid1 arrays using bitmaps. (BZ#1955188)

  • [net/sched] connection failed with DNAT + SNAT by tc action ct (BZ#1956458)

Record
ALSA-2021:2168
Updated
2026-11-02
OSVUSN-4983-1 No score

linux-oem-5.10 vulnerabilities

Piotr Krysiuk discovered that the eBPF implementation in the Linux kernel did not properly enforce limits for pointer operations. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-33200)

Piotr Krysiuk and Benedict Schlueter discovered that the eBPF implementation in the Linux kernel performed out of bounds speculation on pointer arithmetic. A local attacker could use this to expose sensitive information. (CVE-2021-29155)

Piotr Krysiuk discovered that the eBPF implementation in the Linux kernel did not properly prevent speculative loads in certain situations. A local attacker could use this to expose sensitive information (kernel memory). (CVE-2021-31829)

Reiji Watanabe discovered that the KVM VMX implementation in the Linux kernel did not properly prevent user space from tampering with an array index value, leading to a potential out-of-bounds write. A local attacker could use this to cause a denial of service (system crash) or possibly execute arbitrary code. (CVE-2021-3501)

Record
USN-4983-1
Updated
2026-11-02

Affected products

Show 7 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
kernel-tools-libs-devel
AlmaLinux:8
From an advisory covering 2 CVEs
 before 4.18.0-305.3.1.el8_4
4.18.0-305.3.1.el8_4
kernel
Azure Linux:2
 before 5.10.78.1-1
5.10.78.1-1
linux
Debian:12
 before 5.10.38-1
5.10.38-1
linux
Debian:13
 before 5.10.38-1
5.10.38-1
linux
Debian:14
 before 5.10.38-1
5.10.38-1
kpatch-patch-4_18_0-305
Red Hat:enterprise_linux:8::baseos
 before 0:1-1.el8
0:1-1.el8
kpatch-patch-4_18_0-305-debuginfo
Red Hat:enterprise_linux:8::baseos
 before 0:1-1.el8
0:1-1.el8
kpatch-patch-4_18_0-305-debugsource
Red Hat:enterprise_linux:8::baseos
 before 0:1-1.el8
0:1-1.el8
bpftool
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
bpftool-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
Show 91 moreShow less
Affected packages
PackageAffectedFixed
kernel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-abi-stablelists
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debug
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debug-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debug-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debug-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debug-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debuginfo-common-s390x
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-doc
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-tools
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-tools-libs
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-zfcpdump
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-zfcpdump-core
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-zfcpdump-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-zfcpdump-devel
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-zfcpdump-modules
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-zfcpdump-modules-extra
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
python3-perf
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
python3-perf-debuginfo
Red Hat:enterprise_linux:8::baseos
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
bpftool-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debug-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debuginfo-common-aarch64
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debuginfo-common-ppc64le
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-tools-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-tools-libs-devel
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
python3-perf-debuginfo
Red Hat:enterprise_linux:8::crb
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
kernel-rt
Red Hat:enterprise_linux:8::nfv
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debug
Red Hat:enterprise_linux:8::nfv
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debug-core
Red Hat:enterprise_linux:8::nfv
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debug-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::nfv
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::nfv
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-devel
Red Hat:enterprise_linux:8::nfv
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-kvm
Red Hat:enterprise_linux:8::nfv
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-modules
Red Hat:enterprise_linux:8::nfv
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::nfv
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt
Red Hat:enterprise_linux:8::realtime
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debug
Red Hat:enterprise_linux:8::realtime
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debug-core
Red Hat:enterprise_linux:8::realtime
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debug-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debug-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debug-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debug-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debuginfo
Red Hat:enterprise_linux:8::realtime
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-debuginfo-common-x86_64
Red Hat:enterprise_linux:8::realtime
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-devel
Red Hat:enterprise_linux:8::realtime
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-modules
Red Hat:enterprise_linux:8::realtime
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
kernel-rt-modules-extra
Red Hat:enterprise_linux:8::realtime
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.rt7.75.el8_4
0:4.18.0-305.3.1.rt7.75.el8_4
redhat-virtualization-host
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 4 CVEs
 before 0:4.4.6-20210615.0.el8_4
0:4.4.6-20210615.0.el8_4
redhat-virtualization-host-image-update
Red Hat:rhev_hypervisor:4.4::el8
From an advisory covering 4 CVEs
 before 0:4.4.6-20210615.0.el8_4
0:4.4.6-20210615.0.el8_4
kernel
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:4.18.0-305.3.1.el8_4
0:4.18.0-305.3.1.el8_4
linux-hwe-edge
Ubuntu:16.04:LTS
 All versions, plus listed versions
4.8.0-28.30~16.04.14.8.0-30.32~16.04.14.8.0-32.34~16.04.14.8.0-34.36~16.04.14.10.0-14.16~16.04.1
Show 18 moreShow less
4.10.0-19.21~16.04.14.10.0-20.22~16.04.14.10.0-21.23~16.04.14.10.0-22.24~16.04.14.10.0-24.28~16.04.14.10.0-26.30~16.04.14.11.0-13.19~16.04.14.11.0-14.20~16.04.14.13.0-16.19~16.04.34.13.0-17.20~16.04.14.13.0-19.22~16.04.14.13.0-21.24~16.04.14.13.0-25.29~16.04.24.15.0-13.14~16.04.14.15.0-15.16~16.04.14.15.0-20.21~16.04.14.15.0-22.24~16.04.14.15.0-23.25~16.04.1
 None known
linux-aws-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1021.24~18.04.15.0.0-1022.25~18.04.15.0.0-1023.26~18.04.15.0.0-1024.27~18.04.15.0.0-1025.285.0.0-1027.30
 None known
linux-aws-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1019.21~18.04.15.3.0-1023.25~18.04.15.3.0-1028.30~18.04.1
Show 5 moreShow less
5.3.0-1030.32~18.04.15.3.0-1032.34~18.04.25.3.0-1033.355.3.0-1034.365.3.0-1035.37
 None known
linux-azure
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.24.15.0-1003.34.15.0-1004.44.15.0-1008.84.15.0-1009.9
Show 39 moreShow less
4.15.0-1012.124.15.0-1013.134.15.0-1014.144.15.0-1018.184.15.0-1019.194.15.0-1021.214.15.0-1022.234.15.0-1023.244.15.0-1025.264.15.0-1028.294.15.0-1030.314.15.0-1031.324.15.0-1032.334.15.0-1035.364.15.0-1036.384.15.0-1037.394.18.0-1011.11~18.04.14.18.0-1013.13~18.04.14.18.0-1014.14~18.04.14.18.0-1018.18~18.04.14.18.0-1019.19~18.04.14.18.0-1020.20~18.04.14.18.0-1023.24~18.04.14.18.0-1024.25~18.04.14.18.0-1025.27~18.04.15.0.0-1014.14~18.04.15.0.0-1016.17~18.04.15.0.0-1018.19~18.04.15.0.0-1020.21~18.04.15.0.0-1022.23~18.04.15.0.0-1023.24~18.04.15.0.0-1025.27~18.04.15.0.0-1027.29~18.04.15.0.0-1028.30~18.04.15.0.0-1029.31~18.04.15.0.0-1031.335.0.0-1032.345.0.0-1035.375.0.0-1036.38
 None known
linux-azure-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1007.8~18.04.15.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.1
Show 11 moreShow less
5.3.0-1013.14~18.04.15.3.0-1016.17~18.04.15.3.0-1018.19~18.04.15.3.0-1019.20~18.04.15.3.0-1020.21~18.04.15.3.0-1022.23~18.04.15.3.0-1028.29~18.04.15.3.0-1031.32~18.04.15.3.0-1032.33~18.04.15.3.0-1034.35~18.04.15.3.0-1035.36
 None known
linux-azure-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1006.6~18.04.14.18.0-1007.7~18.04.14.18.0-1008.8~18.04.15.0.0-1012.12~18.04.2
 None known
linux-gcp
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1001.14.15.0-1003.34.15.0-1005.54.15.0-1006.64.15.0-1008.8
Show 33 moreShow less
4.15.0-1009.94.15.0-1010.104.15.0-1014.144.15.0-1015.154.15.0-1017.184.15.0-1018.194.15.0-1019.204.15.0-1021.224.15.0-1023.244.15.0-1024.254.15.0-1025.264.15.0-1026.274.15.0-1027.284.15.0-1028.294.15.0-1029.314.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.384.15.0-1037.394.15.0-1040.424.15.0-1042.454.15.0-1044.705.0.0-1020.20~18.04.15.0.0-1021.21~18.04.15.0.0-1025.26~18.04.15.0.0-1026.27~18.04.15.0.0-1028.29~18.04.15.0.0-1029.30~18.04.15.0.0-1031.325.0.0-1033.345.0.0-1034.35
 None known
linux-gcp-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1008.9~18.04.15.3.0-1009.10~18.04.15.3.0-1010.11~18.04.15.3.0-1012.13~18.04.15.3.0-1014.15~18.04.1
Show 8 moreShow less
5.3.0-1016.17~18.04.15.3.0-1017.18~18.04.15.3.0-1018.19~18.04.15.3.0-1020.22~18.04.15.3.0-1026.28~18.04.15.3.0-1029.31~18.04.15.3.0-1030.32~18.04.15.3.0-1032.34~18.04.1
 None known
linux-gcp-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-1004.5~18.04.14.18.0-1005.6~18.04.14.18.0-1006.7~18.04.14.18.0-1007.8~18.04.14.18.0-1008.9~18.04.1
Show 7 moreShow less
4.18.0-1009.10~18.04.14.18.0-1011.12~18.04.14.18.0-1012.13~18.04.14.18.0-1013.14~18.04.14.18.0-1015.16~18.04.15.0.0-1011.11~18.04.15.0.0-1013.13~18.04.1
 None known
linux-gke-4.15
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1030.324.15.0-1032.344.15.0-1033.354.15.0-1034.364.15.0-1036.38
Show 28 moreShow less
4.15.0-1037.394.15.0-1040.424.15.0-1041.434.15.0-1042.444.15.0-1044.464.15.0-1045.484.15.0-1046.494.15.0-1048.514.15.0-1049.524.15.0-1050.534.15.0-1052.554.15.0-1055.584.15.0-1057.604.15.0-1058.614.15.0-1059.624.15.0-1063.664.15.0-1064.674.15.0-1066.694.15.0-1067.704.15.0-1069.724.15.0-1070.734.15.0-1072.764.15.0-1073.784.15.0-1074.794.15.0-1076.814.15.0-1077.824.15.0-1078.834.15.0-1079.84
 None known
linux-hwe
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.18.0-13.14~18.04.14.18.0-14.15~18.04.14.18.0-15.16~18.04.14.18.0-16.17~18.04.14.18.0-17.18~18.04.1
Show 38 moreShow less
4.18.0-18.19~18.04.14.18.0-20.21~18.04.14.18.0-21.22~18.04.14.18.0-22.23~18.04.14.18.0-24.25~18.04.14.18.0-25.26~18.04.15.0.0-23.24~18.04.15.0.0-25.26~18.04.15.0.0-27.28~18.04.15.0.0-29.31~18.04.15.0.0-31.33~18.04.15.0.0-32.34~18.04.25.0.0-35.38~18.04.15.0.0-36.39~18.04.15.0.0-37.40~18.04.15.3.0-26.28~18.04.15.3.0-28.30~18.04.15.3.0-40.32~18.04.15.3.0-42.34~18.04.15.3.0-45.37~18.04.15.3.0-46.38~18.04.15.3.0-51.44~18.04.25.3.0-53.47~18.04.15.3.0-59.53~18.04.15.3.0-61.55~18.04.15.3.0-62.56~18.04.15.3.0-64.58~18.04.15.3.0-65.595.3.0-66.605.3.0-67.615.3.0-68.635.3.0-69.655.3.0-70.665.3.0-72.685.3.0-73.695.3.0-74.705.3.0-75.715.3.0-76.72
 None known
linux-hwe-edge
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-15.16~18.04.15.0.0-16.17~18.04.15.0.0-17.18~18.04.15.0.0-19.20~18.04.15.0.0-20.21~18.04.1
Show 5 moreShow less
5.3.0-19.20~18.04.25.3.0-22.24~18.04.15.3.0-23.25~18.04.15.3.0-23.25~18.04.25.3.0-24.26~18.04.2
 None known
linux-oem
Ubuntu:18.04:LTS
 All versions, plus listed versions
4.15.0-1002.34.15.0-1004.54.15.0-1006.94.15.0-1008.114.15.0-1009.12
Show 45 moreShow less
4.15.0-1012.154.15.0-1013.164.15.0-1015.184.15.0-1017.204.15.0-1018.214.15.0-1021.244.15.0-1024.294.15.0-1026.314.15.0-1028.334.15.0-1030.354.15.0-1033.384.15.0-1034.394.15.0-1035.404.15.0-1036.414.15.0-1038.434.15.0-1039.444.15.0-1043.484.15.0-1045.504.15.0-1050.574.15.0-1056.654.15.0-1057.664.15.0-1059.684.15.0-1063.724.15.0-1064.734.15.0-1065.754.15.0-1066.764.15.0-1067.774.15.0-1069.794.15.0-1073.834.15.0-1076.864.15.0-1079.894.15.0-1080.904.15.0-1081.914.15.0-1087.974.15.0-1090.1004.15.0-1091.1014.15.0-1093.1034.15.0-1094.1044.15.0-1096.1064.15.0-1097.1074.15.0-1099.1094.15.0-1100.1104.15.0-1101.1124.15.0-1102.1134.15.0-1103.114
 None known
linux-oracle-5.0
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.0.0-1007.12~18.04.15.0.0-1008.13~18.04.15.0.0-1009.14~18.04.15.0.0-1010.15~18.04.15.0.0-1011.165.0.0-1013.185.0.0-1014.19
 None known
linux-oracle-5.3
Ubuntu:18.04:LTS
 All versions, plus listed versions
5.3.0-1011.12~18.04.15.3.0-1013.14~18.04.15.3.0-1014.15~18.04.15.3.0-1016.18~18.04.15.3.0-1018.20~18.04.1
Show 4 moreShow less
5.3.0-1024.26~18.04.15.3.0-1027.29~18.04.15.3.0-1028.30~18.04.15.3.0-1030.32~18.04.1
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
 before 5.10.0-1029.30, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 7 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.27
5.10.0-1029.30
linux-raspi2
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.3.0-1007.85.3.0-1014.165.3.0-1015.175.3.0-1017.195.4.0-1004.45.4.0-1006.6
 None known
linux-riscv
Ubuntu:20.04:LTS
 All versions, plus listed versions
5.4.0-24.285.4.0-26.305.4.0-27.315.4.0-28.325.4.0-30.34
Show 7 moreShow less
5.4.0-31.355.4.0-33.375.4.0-34.385.4.0-36.415.4.0-37.425.4.0-39.445.4.0-40.45
 None known
linux-oem-5.10
Ubuntu:20.04:LTS
From an advisory covering 4 CVEs
 before 5.10.0-1029.30, plus listed versions
5.10.0-1008.95.10.0-1011.125.10.0-1013.145.10.0-1014.155.10.0-1016.17
Show 7 moreShow less
5.10.0-1017.185.10.0-1019.205.10.0-1021.225.10.0-1022.235.10.0-1023.245.10.0-1025.265.10.0-1026.27
5.10.0-1029.30

History

History
RecordedChangedSources
affected, facts
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-3501 is a high vulnerability (CVSS 7.1) in Linux Kernel, published May 5, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.38%, the 31st percentile. Fixed in kernel 5.10.78.1-1.

References

Show 41 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open